Lucene search

K

Redhat.comRH:CVE-2024-2607

HistoryMar 21, 2024 - 11:39 a.m.

CVE-2024-2607

2024-03-2111:39:26

redhat.com

access.redhat.com

9

mozilla foundation

security advisory

return registers

overwritten

arbitrary code

execution

armv7-a

systems

affected

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low

EPSS

0

Percentile

10.3%

The Mozilla Foundation Security Advisory describes this flaw as: Return registers were overwritten which could have allowed an attacker to execute arbitrary code. Note: This issue only affected Armv7-A systems. Other operating systems are unaffected.

References

bugzilla.redhat.com/show_bug.cgi?id=2270660

nvd.nist.gov/vuln/detail/CVE-2024-2607

www.cve.org/CVERecord?id=CVE-2024-2607

www.mozilla.org/en-US/security/advisories/mfsa2024-13/#CVE-2024-2607

www.mozilla.org/en-US/security/advisories/mfsa2024-14/#CVE-2024-2607

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

Low

EPSS

0

Percentile

10.3%

Related for RH:CVE-2024-2607

cnvd1 debiancve1 cgr1 osv15 ubuntucve1 veracode1 vulnrichment1 nvd1 cve1 alpinelinux1 cvelist1 openvas15 oraclelinux6 nessus54 redhat18 ubuntu2 rocky2 mageia2 centos2 almalinux4 debian4 kaspersky3 slackware2 mozilla3 ibm1